PT-2024-8372 · Linux+5 · Linux Kernel+5

Published 2024-01-24 · Updated 2025-03-28 · CVE-2024-35837

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the use of an uninitialized resource in the mvpp2 component of the Linux kernel. This can lead to a denial of service when the kernel is booted using kexec, resulting in a kernel panic due to persistent register values. The problem is specifically tied to the mvpp2 bm pool cleanup() and mvpp2 bm init() functions in the drivers/net/ethernet/marvell/mvpp2/mvpp2 main.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

BDU:2024-09931

CVE-2024-35837

DLA-3842-1

OESA-2024-1941

OESA-2024-1942

OESA-2024-2182

OPENSUSE-SU-2024_2947-1

SUSE-SU-2024:2135-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2892-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2901-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2940-1

SUSE-SU-2024:2947-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20249-1

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3813

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35837.json · Exploit
• https://ubuntu.com/security/CVE-2023-52626 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48828 · Security Note
• https://ubuntu.com/security/CVE-2023-52589 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09931 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-40956 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38548 · Security Note
• https://osv.dev/vulnerability/CVE-2024-35837 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44995 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43863 · Security Note
• https://ubuntu.com/security/CVE-2024-26615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40963 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-35837 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52609 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52598 · Vendor Advisory